skip to main content

Win 32 Sality Virus?

16 years ago

I have gotten a message, twice, from ZA (?) about this.

Is the message really from ZA, and should I download it?

I have searched here for info but haven't found any references to it.

TIA.

Sue

Sort by:Oldest

Comments (11)

grandms
16 years ago
Have you scanned with your AV program? I certainly would do that. In addition, run a scan with Malwarebytes and Superantispyware. Make sure all are fully updated before running the scans. If you're not sure this is a legitimate message from Zone Alarm, be wary of it.

Exactly what is this message asking you to download? This makes it suspect to me, since I don't think ZA would ask you to download something.
kudzu9
16 years ago
As I understand it, you are saying you are getting a message from ZA, but it's not installed on your computer, right? While it may be a legitimate sales message from ZoneAlarm, it doesn't mean your computer has this virus or that you need to download ZA.

Here is a link that might be useful: ZA +Sality Virus
Related Discussions
Win32.Patched.GB Trojan
Q
Comments (12)
Well I clicked on a link above and it apparently took me out of this forum into one of the general forums, so excuse the double post. I have apparently got this particular piece of malware too. I started full scans of my spyware/malware programs last night to try to identify and clean out this virus, which I also got in the course of a recipe search, apparently from the Food Network. Unfortunately my son got up this morning, saw my netbook sitting there with the clamshell up, thought I'd left it on by accident, and shut it down. Now it won't boot, not even in safe mode. I know the winlogon.exe file was corrupted and had scheduled a boot scan in Avast, but what it does now is cycle constantly between the blue screen with a message that flashes past far too quickly for me to read it, and the windows boot screen. It never comes up. Since it was shut down before I got up this morning, I also didn't get to write down my XP license number, so even though I have access to an external DVD and an XP installation disk, I DON'T have a valid license # to enter. I fear my netbook is bricked, all because of a recipe for apple streusel pie.
...See More
Problem still exists, Virus or surge damage?
Q
Comments (13)
Hmm, I had not read the whole MS page but basically you only need to follow the first 2 instructions. I have never had to use those other instructions myself. Remember that if you get flustered just click the Cancel button to get out of where you are. There is nothing to be afraid of when using System File Checker. You It simply goes through your computer checking all the operating system files and replaces those which are corrupt or missing. The need for the CD is so it can get the needed files to install for you. The slight downside is that it takes the computer back to when your particular CD was created which means you will be behind on security updates and possibly a service pack. No big deal there either, you simply go to the windows update site and the computer grabs whatever it needs. You are doing nothing wrong. Who knows why those files went missing. Perhaps/probably it was due to the power outage. You can of course extract and install each of those files if you wish to avoid using SFC. Follow the instructions here to do that for each file. You do not have to do them all at one time. Try one, see how it goes then do others as you feel up to the task.
...See More
My First Computer Virus
Q
Comments (5)
Post the information at this forum you will be assisted there and a closer look can be taken, link below: You will need to join the forum to post very helpful forum. once you post there only take advice from that forum. Here is a link that might be useful: landzdown
...See More
Virus software says I have a virus what to do?
Q
Comments (8)
if it put it in quarantine you should be ok, most antivirus programs allow you to go to the chest and from there select delete. I would also run these 2 free programs to make sure you do not have anything else. SUPERAntiSpyware Malwarebytes' Anti-Malware download Malwarebytes' Anti-Malware to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download and install the latest version. * Once the program has loaded, select Perform full scan, then click Scan. * When the scan is complete, click OK, then Show Results to view the results. * Be sure that everything is checked, and click Remove Selected. Install them, update them then do the scans and let them clean up what they find. Also I would go and run this online scan too. FREE Online Virus Scan
...See More
DA_Mccoy
16 years ago
Is ZA reporting inbound or outgoing?

I just checked Google and there is a lot of information available. Below is a Symantec link. The rest can be viewed at your convenience

Here is a link that might be useful: W32Sality
ravencajun Zone 8b TX
16 years ago
you need to be more specific in your post, with the minimal info you provided we are having to guess wildly, not a good way to go.

do you have zonealarm installed? what is giving the warning? did something say you had the infection? what AV and malware programs do you have installed and have you run scans?

Run malwarebytes full scan after updating it no matter what at this point to see what it reports.

How to download and install Malwarebytes' Anti-Malware application for Windows computers
sue_va
Original Author
16 years ago
Starting Over.

This is the message I got earlier. I had checked Remind me later so I would be able to check it out.

The Message:
Zone Alarm Service Agent.

Security Alert. The Win32Security Virus Disables antivirus and is spreading fast.

The new Zone Alarm Free Firewall has real time threat data to protect against Sality and 1000's of new attacks every day.
Get your free update now for your protection.
0 Update now
0 Remind me later ?Days
OK

This sounded fishy to me, so I googled and found many pages saying the same thing: Sality is bad and here is how to uninstall it.

So I updated and ran AVG, Malwarebytes, SuperAnti Spyware and SpywareBlaster. Everything clean. I went to the ZA site and saw nothing about it there.

So then I came here on Friday with my question.

Got the same message again today.

I think it is bogus and should be ignored, but I know you all will straighten me out either way. And also, maybe help some others, too.

HP Media Center WINXP SP3

TIA.

Sue
grandms
16 years ago
If you do not presently have ZA installed on your computer, it sounds like one of those rogue programs trying to disguise itself as ZA. On the other hand, if you DO have ZA installed, it could be an update message, although it doesn't sound like their method of pushing out updates. I don't have ZA, so can't say if it is legitimate or not. I would not click anything on it (the message). Close your browser and ignore it.
kudzu9
16 years ago
sue-
Please answer the basic question: Do you already have ZA installed or not?
sue_va
Original Author
16 years ago
Yes, I have ZA installed, and have had it "forever."

Sue
zep516
16 years ago
Most likely it's an offer to upgrade to a retail version of Zone Alarm or something like that. Firewalls don't give virus warning messages.

Ignore it, like grandms said.
sue_va
Original Author
16 years ago
That message will probably show up again, but if it does, this time I will just ignore it and maybe it will go away, for good.

Thanks.

Sue
jane__ny
16 years ago
I got the same message on my computers (5) and took it. It was an upgrade. Same free firewall and the upgrade was easy. It saved my old settings. This took place over a week ago. I haven't noticed any difference.

Its safe!

Jane

Related Stories

ACCESSORIES 40 Design-Friendly Gifts for Modern Kids

By Becky Harris

Houzz Gift Guide 2010: Gifts to Inspire Feel-Good Fun, Creativity, and Even Clutter Control

Sponsored

AIS Renovations

15 Reviews

Custom Craftsmanship & Construction Solutions in Franklin County, Ohio

More Discussions

Tired of MS Office 365 Monthly Fees?

1